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• A water main break caused by a burst valve spilled thousands of gallons of water for 
almost 13 hours in northeast Philadelphia January 14, forcing crews to work overnight to 
shut off the water. - WPVI 6 Philadelphia (See item 14 ) 

• Two correctional officers and 8 inmates were killed while 5 others were injured January 14 
after their prison transport bus collided with a moving Union Pacific train near Penwell, 
Texas. - CNN (See item 25 ) 

• All 208 inmates were evacuated from the Northumberland County Prison in Pennsylvania 
January 14 due to a large fire that destroyed the facility. - Associated Press (See item 26 ) 

• The improper use of propane and oxygen at the Princess Diamond jewelry store at the Eden 
Center shopping mall in Falls Church, Virginia, January 14 sparked an accidental 
explosion and 2-alarm fire that caused about $1 million in damage. - WJLA 7 Washington, 
D.C. (See item 33) 
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Energy Sector 



1. January 15, Dickinson Press - (North Dakota) Spill reported in Renville County. 
Enduro Operating reported a spill of approximately 25 barrels of oil and 820 barrels of 
brine at an oil well site in Renville County. The North Dakota Department of Health 
announced that an estimated 70 barrels of the spilled brine flowed off the well pad near 
Tolley and that cleanup was underway. 

Source: 

http://www.thedickinsonpress.com/energv/bakken/3656042-spill-reported-renville-cou 

nty 
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Chemical Industry Sector 

2. January 15, Occupational Health & Safety Online - (National) 22 billion pounds of 
chemical waste recycled in 2013: EPA. The U.S. Environmental Protection Agency 
published its annual Toxics Release Inventory report January 14 which showed about 
84 percent of the 26 billion pounds of toxic chemical waste managed at U.S. industrial 
facilities in 2013 was recycled or managed through other preferred practices, while the 
remaining 4 billion pounds were disposed of or otherwise released into the 
environment. The report also noted that the percentage managed as waste by the 
nation’s industrial facilities saw a 4 percent increase between 2012 and 2013. 

Source: http ://ohsonline.com/articles/20 15/01/1 5/tri -inventory . aspx 

3. January 13, Orangeburg Times and Democrat — (South Carolina) Oil fire at chemical 
plant extinguished with no injuries. A mechanism failure at the SI Group chemical 
plant in Orangeburg, South Carolina, sparked a fire January 13 that burned heavy oil 
used to transfer heat to different processes. Authorities are investigating to determine if 
any plant processes were impacted or if any shutdown of plant operations will be 
required. 

Source: 

http://thetandd.com/news/oil-fire-at-chemical-plant-extinguished-with-no-iniuries/articl 
e 83d 1 8ecK )-9b6f- 1 1 e4-b2 1 8-4334Sb4d68ea.html 
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Nuclear Reactors, Materials, and Waste Sector 

4. January 13, New London Day - (Connecticut) Millstone Power Station may face 
possible enforcement action after inspection. The U.S. Nuclear Regulatory 
Commission stated January 13 that the Millstone Power Station in Waterford was cited 
for two undisclosed security findings during a November 24 inspection. Both problems 
were corrected immediately after they were identified but may result in enforcement 
actions. 

Source: http://www.thedav.com/article/20150113/NWS01/150119932/1018 



- 2 - 



[ Return to top ] 



Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. January 14, KIF1 8 Idaho Falls - (Idaho) Man pleads guilty to installing credit card 
skimmers in Idaho Falls. A California man pleaded guilty January 14 to placing 
skimming devices on gas pumps at two stations in Caldwell and Idaho Falls during 
January and February 2014 which collected the information of about 160 payment 
cards. 

Source: 

http://www.localnews8.com/news/man-pleads-guiltv-to-installing-credit-card-skimmer 

s-in-idaho-falls/30708970 

6. January 14, KPRC 2 Houston - (Texas) ‘Texas Longhorn Bandit’ bank robber on 
the run. The FBI is searching for a suspect kn own as the “Texas Longhorn Bandit” 
believed to be responsible for 4 bank robberies in the Houston area, including the 
robbery of 2 Chase Bank branches January 14. 

Source: 

http://www.click2houston.com/news/texas-longhorn-bandit-bank-robber-on-the-run/30 

714062 
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Transportation Systems Sector 

7. January 15, Associated Press - (Kansas) Postal employee indicted for mail theft. A 
Blue Rapids postal employee was indicted January 14 for allegedly embezzling 
first-class mail and political mail while working at the Marysville Post Office in 
Wichita during October 2014. 

Source: 

http://kansasfirstnews.com/2015/01/15/postal-employee-indicted-for-mail-theft/ 

8. January 13, SC Magazine - (National) American Airlines says 10k AAdvantage 
accounts may have been accessed. American Airlines stated January 13 that around 
10,000 AAdvantage accounts may have been accessible to an unknown party using 
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credentials obtained elsewhere but identified only 2 instances were frequent flyer miles 
were used without the account holder’s authorization. All impacted customers are being 
notified and offered a free year of credit monitoring service. 

Source: 

http://www.scmagazine.com/american-airlines-savs-10k-aadvantage-accounts-mav-hav 

e-been-accessed/article/392361/ 



9. January 13, Alaska Dispatch News - (Alaska) Troopers: Expect delays on Seward 
Highway after Monday accident. The Seward Highway was closed for approximately 
4 hours January 12 after a semi-truck overturned and spilled its load of vehicle scraps 
and metal. Troopers warned motorists of potential delays for several days while crews 
clean up the debris. 

Source: 

http://www.adn.com/article/201501 13/troopers-expect-delays-seward-highway-after-m 
onday-accident 

For another story, see item 25 
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Food and Agriculture Sector 

10. January 15, U.S. Department of Agriculture - (National) Massachusetts firm recalls 
ground beef products due to possible foreign matter contamination. The Food 
Safety and Inspection Service reported January 14 that J & G Foods, Inc., issued a 
recall for about 33,948 pounds of Wegman’s Organic -branded ground beef products 
due to possible contamination with plastic materials. The problem was discovered after 
the company received notice of consumer complaints through retailers that the product 
contained small malleable plastic pieces. 

Source: 

http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health-alerts/recall-c 

ase-archive/archive/2015/mr-008-2015 



11. January 15, U.S. Department of Agriculture - (National) Iowa firm recalls beef 
products due to misbranding and undeclared allergens. The Food Safety and 
Inspection Service announced January 14 that Agri Star Meat & Poultry recalled about 
1,690 pounds of Aaron’s Best Gluten Free Beef Franks Hot & Spicy Chipotle products 
that were distributed nationwide due to undeclared peanuts. The recall was initiated 
after a supplier notified the company that the ground cumin spice used to produce the 
beef franks may have been contaminated with peanut residue. 

Source: 

http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health-alerts/recall-c 
ase-archive/archive/2015/recall-009-201 5-release 



12. January 15, U.S. Food and Drug Administration - (National) Gilster - Mary Lee 
Corp. issues an allergen alert for undeclared almonds in Market Pantry Honey & 
Oat Mixers Ready to Eat cereal. The U.S. Food and Drug Administration reported 
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January 14 that Gilster-Mary Lee Corp., recalled one lot of Market Pantry Honey & 

Oat Mixers Ready to Eat Cereal due to undeclared almonds. The recall includes one lot 
of 18-ounce cartons of the product which was distributed for sale exclusively at Target 
Stores nationwide. 

Source: http://www.fda.gov/Safetv/Recalls/ucm430388.htm 

13. January 14, U.S. Food and Drug Administration - (New Jersey; New York; 

Pennsylvania) NAC Foods Co. issues an allergy alert on undeclared peanut protein 
on ground cumin product. The U.S. Food and Drug Administration reported January 
14 that NAC Foods recalled Mimi’s Products- and Rosa Maria-branded ground cumin 
products due to undeclared peanut protein. The recalled products were distributed and 
sold to retailers in New Jersey, New York, and Pennsylvania. 

Source: http://www.fda.gov/Safetv/Recalls/ucm43035 1 .htm 
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Water and Wastewater Systems Sector 

14. January 15, WPVI 6 Philadelphia - (Pennsylvania) Geyser finally shut off hours 
after huge water main break in Northeast Philadelphia. A water main break caused 
by a burst valve spilled thousands of gallons of water for almost 13 hours in northeast 
Philadelphia January 14, forcing crews to work overnight to shut off the water. Fire 
hydrants in the area were without water for a time but no residents in the area lost 
service as a result. 

Source: http://6abc.com/news/efforts-to-shut-off-huge-geyser-fail-in-ne-phila/475668/ 

15. January 14, Vineland Daily Journal - (New Jersey) Vineland says feds agree to test 
contaminated park. The city government of Vineland reported January 13 that the 
federal government has agreed to test for dangerous industrial contaminants in the 
water of Burnt Mill Pond and neighboring soil related to the former Shieldalloy 
Metallurgical Corp. property nearby. The city also stated concern over contaminated 
storm water runoff from a slag heap at the former ore and mineral processing plant. 
Source: 

http://www.thedailviournal.com/storv/news/local/2015/01/13/vineland-savs-feds-agree- 
test-contaminated-park/2 1722325/ 

16. January 13, Roanoke Rapids Daily Herald - (North Carolina) Wastewater spill 
announced. The Roanoke Rapids Sanity District reported an estimated 44,900 gallon 
wastewater discharge from the Roanoke River Wastewater Treatment Plant in Weldon 
January 14 due to loss of power caused by equipment failure. The North Carolina 
Department of Environment and Natural Resources, Division of Water Resources was 
notified and is reviewing the incident. 

Source: 

http://www.rrdailvherald.com/news/features/wastewater-spill-announced/article 9e3 1 2 
00e-9b44- 1 1 e4-8b89-33bbddbc 1 625 .html 
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Healthcare and Public Health Sector 



17. January 14, KBAK 29 Bakersfield/KBFX 58 Bakersfield - (California) Power restored 
at Mercy Southwest hospital. Ambulance traffic was diverted, several patients were 
transferred to nearby hospitals, and all elective procedures were cancelled due to a 
power outage caused by a transformer that went down at Mercy Southwest Hospital in 
Bakersfield January 12. Full power was restored January 14 after a generator kicked on 
following the outage. 

Source: 

http://www.bakersfieldnow.com/news/local/Power-outage-at-Mercv-Southwest-hospita 

l-causes-baby-patient-trasfers-288499011.html 

18. January 14, Rochester Democrat and Chronicle - (New York) Cracks spur 
evacuation at Wyoming facility. Approximately 60 residents were moved to other 
areas of the Wyoming County Community Hospital Skilled Nursing Facility in New 
York while 20 others were transferred to neighboring facilities following an unknown 
incident that caused cracks in the floor-to-ceiling windows in the dining area of the 
building January 14. Emergency repairs were expected to take several days while 
officials investigated potential causes. 

Source: 

http://www.democratandchronicle.com/storv/news/2015/01/14/wvoming-county-nursin 
g-home- structure-damage/2 1753247/ 

19. January 14, WCBD 2 Charleston - (South Carolina) Nason Medical settles fraud 
claims with US government for $1 million. The U.S. Department of Health and 
Human Services, Office of Inspector General reached a settlement January 14 with 
Nason Medical Centers and two if its owners regarding health care fraud after an 
investigation determined the medical center submitted several false claims to Medicare, 
Medicaid, and TRICARE at its South Carolina offices. The company agreed to pay $1 
million, remove all its imaging equipment except for X-rays, and take down its 
Emergency signage, among other requirements as part of the settlement. 

Source: 

http://www.counton2.com/story/27851609/nason-medical-settles-fraud-claims-with-us- 
govemment-for- 1 -million 

20. January 14, Los Angeles Times - (California) La Mesa clinic closes when 5 people 
arrive with possible measles. The Sharp Rees-Stealy urgent-care clinic in La Mesa 
was closed for several hours January 14 while personnel disinfected the clinic after 5 
individuals arrived with symptoms of measles, potentially related to an ongoing 
outbreak that has reached 32 confirmed cases. The patients were isolated and examined 
while workers referred other patients to neighboring Rees-Stealy clinics during the 
incident. 

Source: 

http://www.latimes.com/local/lanow/la-me-ln-clinic-measles-20150114-story.html 
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Government Facilities Sector 



21. January 15, WCAU 10 Philadelphia - (New Jersey) Nothing hostile found at Joint 
Base McGuire-Dix-Lakehurst after evacuation. Officials cleared the scene at Joint 
Base McGuire-Dix-Lakehurst in Burlington County, New Jersey, January 14 following 
a nearly 3-hour investigation into a suspicious package that was found at the 
Commissary and Base Exchange. 

Source: 

http://www.nbcphiladelphia.com/news/local/Suspicious-Package-at-Joint-Base-McGuir 

e-Dix-Lakehurst-Prompts-Evacuation-288578801.html 

22. January 14, WX1A 11 Atlanta - (Georgia) Students bused to alternate schools after 
boiler leak. Classes at Oak View Elementary in DeKalb County were expected to 
resume January 16 after students were evacuated January 14 due to a leak in the boiler 
which caused a potential carbon monoxide issue. Officials determined there was no 
carbon monoxide danger, but turned off the heat to the classrooms while repairs were 
made to the boiler. 

Source: 

http://www.llalive.com/storv/news/local/decatur/2015/01/14/oak-view-elementarv-car 
bon-monoxide/2 177505 5/ 

23. January 14, Associated Press - (North Carolina) 15 injured when school bus 
overturns in North Carolina. Fifteen children were transported to area hospitals 
following an accident involving a Gaston County Schools’ bus that swerved and 
overturned in Gastonia January 14 after the driver attempted to close a compartment 
door that fell open. 

Source: 

http://www.foxnews.com/us/2015/01/14/15-iniured-when-school-bus-overtums-in-nort 

h-carolina/ 
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Emergency Services Sector 

24. January 15, Natchez Democrat - (Mississippi) Man pleads guilty in prison riot trial. 
A former inmate at Adams County Correctional Center in Natchez pleaded guilty to a 
charge January 14 in connection to the death of a prison guard during a May 2012 riot 
that involved hundreds of inmates, resulted in over $1.3 million in damages, left several 
inmates and guards injured, and caused the death of the correctional officer. 

Source: 

http://www.natchezdemocrat.com/2015/01/15/man-pleads-guiltv-in-prison-riot-trial/ 

25. January 14, CNN - (Texas) 10 dead after prison bus collides with train in Texas. 

Two correctional officers and 8 inmates were killed while 5 others were injured 
January 14 after their prison transport bus collided with a moving Union Pacific train 
near Penwell, Texas. Authorities are investigating and no rail cars derailed in the 
accident. 
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Source: http://www.cnn.com/2015/01/14/us/texas-deadly-bus-crash/index.html 



26. January 14, Associated Press - (Pennsylvania) Fire forces 200 inmates from 
century-old Pennsylvania prison. All 208 inmates were evacuated from the 
Northumberland County Prison in Pennsylvania January 14 due to a large fire that 
destroyed the facility. The inmates were divided by gender and moved to separate State 
prisons nearby while authorities investigated the cause of the fire after declaring the 
prison a total loss. 

Source: 

http://www.aol.com/article/2015/01/14/fire-forces-200-inmates-from-centurv-old-penn 
sylvania- prison/21 129932/ 

For another story, see item 35 
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Information Technology Sector 

27. January 15, Softpedia - (International) Google AdSense used for malvertising 
campaign. Researchers with Sucuri identified at least two AdWords campaigns using 
Google’s AdSense program to modify legitimate ads in order to redirect users to 
fraudulent Web sites. 

Source: 

http://news.softpedia.com/news/Google-AdSense-Used-For-Malvertising-Campaign-47 

0064.shtml 

28. January 15, Softpedia - (International) Linkedln phishing uses HTML file to steal 
credentials. A researcher with Symantec reported that a recent phishing campaign 
designed to harvest login credentials for professional networking service Linkedln uses 
a modified HTML file that contains the legitimate code from Linkedln’ s login page but 
instead redirects the information to the attackers running the campaign. The use of an 
HTML file prevents users from being protected by blacklists and also allows the 
attacker to use several techniques to avoid automatic phishing detection methods. 
Source: 

http://news.softpedia.com/news/LinkedIn-Phishing-Uses-HTML-File-to-Steal-Credenti 

als-470136.shtml 



29. January 15, Softpedia - (International) Bogus Oracle patches flung by malicious 
websites. Oracle posted a warning to users the week of January 12 stating that it had 
received information on several fraudulent Web sites claiming to provide patches for 
Oracle products that are in fact malware. Oracle advised users to only download 
patches from its official sites and asked users encountering the fraudulent sites to report 
them. 

Source: 

http://news.softpedia.com/news/Bogus-Oracle-Patches-Flung-By-Malicious-Websites-4 

70147.shtml 
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30. January 15, CSO - (International) Mobile malware up 77 percent in 2014. Lookout 
Inc., released a report on mobile malware and found that the mobile malware encounter 
rate for 2014 increased from 4 percent in 2013 to 7 percent, a 75 percent increase. The 
researchers also noted that mobile malware attacks increased in both sophistication and 
frequency during the past year, among other findings. 

Source: 

http://www.networkworld.com/article/2871116/mobile-securitv/mobile-malware-up-75 

-in-2014.html 



31. January 14, Softpedia - (International) CryptoWall makes a comeback, version 3.0 
spotted in the wild. Microsoft researchers and an independent researcher identified a 
new version of the CryptoWall (also known as Crowd) ransomware dubbed 
CryptoWall 3.0 that contains localized ransom messages and directs victims to several 
addresses located on the I2P anonymity network, or the Tor network as a fallback. The 
malware encrypts victims’ files and demands a $500 ransom be paid in Bitcoin virtual 
currency in order to decrypt the files. 

Source: 

http://news.softpedia.com/news/CrvptoWall-Makes-a-Comeback-Version-3-0-Spotted- 

In-the-Wild-470033.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



32. January 14, American Radio Relay League - (Pennsylvania) FCC fines Pennsylvania 
Ham $11,500 for causing intentional interference. The FCC Enforcement Bureau 
affirmed a fine January 13 against the North Huntingdon operator of K3VR totaling 
$1 1,500 for deliberately interfering with others’ Amateur Radio communications. 
Source: 

http://www.arrl.org/news/fcc-fines-pennsvlvania-ham-ll-500-for-causing-intentional-i 

nterference 
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Commercial Facilities Sector 



33. January 15, WJLA 7 Washington, D.C. - (Virginia) 3 injured in fire & gas explosion 
at Falls Church shopping center. The improper use of propane and oxygen at the 
Princess Diamond jewelry store at the Eden Center shopping mall in Falls Church 
January 14 sparked an accidental explosion and 2-alarm fire that caused about $1 
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million in damage. Three individuals were transported to an area hospital with 
non-life-threatening injuries and all stores, with the exception of the jewelry store, were 
expected to reopen January 15. 

Source: 

http://www.wUa.com/articles/2015/01/breaking-news-fire-gas-explosion-at-falls-church 
-shopping-center- 1 10560.html 

34. January 15, KNTV 11 San Jose - (California) Car crashes into NewPark Mall 

Macy's store. Four people were injured and two others required medical attention after 
a driver suffering a medical issue lost control and crashed a vehicle through the 
entrance of a Macy’s department store at the NewPark Mall in Newark, California, 
January 14 and traveled about 50 feet into the store before coming to a stop. The store 
was evacuated and closed while police investigated the incident. 

Source: 

http://www.nbcbavarea.com/news/local/Car-Crashes-Into-Newark-Macys-4-Iniured-28 
8624841 .html 



35. January 14, Lower Hudson Valley Journal News - (New York) 45 displaced, 13 
firefighters hurt in Yonkers blaze. Authorities are investigating the cause of a 
multi-alarm fire at a Yonkers apartment building January 14 that displaced 45 residents, 
including 31 children. Thirteen firefighters suffered minor injuries during the response 
and were treated at the scene or transported to area hospitals. 

Source: 

http://www.lohud.com/storv/news/local/westchester/2015/01/14/vonkers-fire-groshon-a 

venue/21745825/ 



36. January 13, KSDK 5 St. Louis - (Missouri) Residents forced out of condemned 
apartment building. Residents from 21 units at the Penrose Apartments’ building in 
St. Louis were displaced or relocated after authorities condemned the structure during 
the week of January 5 due to the owner’s failure to obtain the proper occupancy 
permits. City officials are investigating reports that the owner of the building posted 
illegal signage on the property that ordered residents to vacate in 10 days. 

Source: 

http://www.ksdk.eom/storv/news/local/2015/01/13/condemned-apartment-martellaro/2 

1721029/ 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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